works with probability of about for messages that are bits long. However, this work does not show a more effective attack than was previously known; the success probability in observation 1 of this paper matches that of lemma 2 from the INDOCRYPT 2004 analysis (setting and ). Saarinen also described a GCM variant Sophie Germain Counter Mode (SGCM) based on Sophie Germain primes. See also Authenticated encryption Block cipher mode of operation AES-GCM-SIV References External links NIST Special Publication SP800-38D defining GCM and GMAC : The Use of Galois/Counter Mode (GCM) in IPsec Encapsulating Security Payload (ESP) : The Use of Galois Message Authentication Code (GMAC) in IPsec ESP and AH : AES Galois Counter Mode (GCM) Cipher Suites for TLS : Addition of the Camellia Cipher Suites to Transport Layer Security (TLS) IEEE 802.1AE – Media Access Control (MAC) Security IEEE Security in Storage Working Group developed the P1619.1 standard INCITS T11 Technical Committee works on Fibre Channel – Security Protocols project. AES-GCM and AES-CCM Authenticated Encryption in Secure RTP (SRTP) The Galois/Counter Mode of Operation (GCM) Block cipher modes of operation Finite fields Message authentication codes Authenticated-encryption schemes